This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GThusBjSSD1_iE21_fnCPzPjJvk.roa
File: GThusBjSSD1_iE21_fnCPzPjJvk.roa (raw, json)
Hash identifier: kNNDS1tA00HsAlDB4vvyElivwsFS8rrkFshjMcVfYZ0=
Subject key identifier: 19:38:6E:B0:18:D2:48:3D:7F:88:4D:B5:FD:F9:C2:3F:33:E3:26:F9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F8506404AB313588D14AB0072331F55
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GThusBjSSD1_iE21_fnCPzPjJvk.roa
Signing time: Fri 02 Jan 2026 16:23:02 +0000
ROA not before: Fri 02 Jan 2026 16:23:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209067
IP address blocks: 92.253.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:06:40:4a:b3:13:58:8d:14:ab:00:72:33:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:23:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19386eb018d2483d7f884db5fdf9c23f33e326f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:6d:f4:6c:c7:89:32:c5:2d:fc:04:35:39:
e8:b4:cb:5c:92:8e:58:07:3a:44:24:6e:84:9f:53:
a9:37:1d:dc:77:cd:14:33:69:85:35:77:d4:9c:b8:
c1:16:c6:e1:d3:d2:b6:c3:93:3b:09:5a:1e:14:a5:
68:6d:ee:09:23:d4:6e:dd:be:df:d6:ae:9b:af:1e:
17:a9:a7:4a:2b:d6:68:1f:5f:5e:f5:ef:85:4d:64:
20:0a:15:c5:d5:53:b7:2b:ba:65:03:f7:47:d7:be:
7c:6e:af:7e:de:68:d2:15:76:cc:26:63:0a:3c:1e:
be:e3:0d:18:52:9f:c5:ad:6c:f5:f9:67:e7:b1:7b:
46:8d:c0:e0:dc:de:4f:c8:54:49:25:ee:ad:b7:5b:
c5:ba:06:04:42:95:cb:5a:10:9a:68:f4:c8:e3:69:
ee:6c:93:bd:a8:df:76:d7:70:55:ce:b3:17:c8:60:
7c:f2:60:30:6d:03:a1:13:23:f3:2c:0a:a8:d8:71:
b8:aa:2d:a8:ce:a1:56:bf:24:a2:d4:5f:7e:7e:76:
2c:c9:4a:c0:23:74:2a:06:05:2b:51:f1:0f:b1:6d:
31:a8:4e:bd:53:7c:01:cc:a4:19:c7:9d:2f:3e:16:
20:ca:17:61:69:2e:c1:92:43:bb:ba:ec:51:60:be:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:6E:B0:18:D2:48:3D:7F:88:4D:B5:FD:F9:C2:3F:33:E3:26:F9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GThusBjSSD1_iE21_fnCPzPjJvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.200.0/24
Signature Algorithm: sha256WithRSAEncryption
58:81:83:1e:43:a1:d6:f0:15:25:10:5d:2d:9c:3a:f6:a0:47:
12:f6:d9:09:d7:55:4b:dd:42:2b:40:26:df:d5:29:04:d4:b1:
7d:70:64:d1:92:af:a9:12:7d:9c:bd:cb:38:e8:f7:0c:07:d4:
f0:0c:a4:5e:3a:5d:82:77:7b:ee:6d:3e:7f:82:e7:06:1f:a6:
5e:81:0c:27:1d:e0:10:ca:fa:89:53:6d:9f:0c:72:3d:f8:a7:
5b:f4:34:44:82:d0:68:81:f4:39:ea:ee:91:0c:72:ed:02:59:
05:d3:86:15:48:c5:90:90:77:df:3b:df:71:3c:3f:c8:85:1a:
1d:ba:39:eb:41:44:0c:c6:72:19:bf:58:6b:03:5a:8b:c1:5f:
6a:87:7f:77:3e:ce:b1:23:e3:25:a5:31:d9:10:13:4d:12:5d:
42:f6:ab:39:76:21:47:da:be:57:e1:11:b2:a3:72:2c:8d:2f:
8b:25:70:93:76:dc:e4:0a:ab:5a:f1:7b:56:46:b0:a7:7f:43:
74:d0:bd:00:51:a1:78:0c:3b:d1:3c:97:dd:94:6d:c6:72:09:
8b:a8:56:34:19:b5:13:49:2e:7f:4e:96:65:3c:1c:b0:0e:ac:
3a:c3:90:37:71:6b:56:17:8c:c0:87:b7:b8:26:74:cc:73:1d:
43:6d:e0:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hQZASrMTWI0UqwByMx9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTM4NmViMDE4ZDI0ODNkN2Y4ODRkYjVmZGY5YzIzZjMzZTMyNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpt9GzHiTLFLfwENTnotMtcko5Y
BzpEJG6En1OpNx3cd80UM2mFNXfUnLjBFsbh09K2w5M7CVoeFKVobe4JI9Ru3b7f
1q6brx4XqadKK9ZoH19e9e+FTWQgChXF1VO3K7plA/dH1758bq9+3mjSFXbMJmMK
PB6+4w0YUp/FrWz1+WfnsXtGjcDg3N5PyFRJJe6tt1vFugYEQpXLWhCaaPTI42nu
bJO9qN9213BVzrMXyGB88mAwbQOhEyPzLAqo2HG4qi2ozqFWvySi1F9+fnYsyUrA
I3QqBgUrUfEPsW0xqE69U3wBzKQZx50vPhYgyhdhaS7BkkO7uuxRYL7e6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBk4brAY0kg9f4hNtf35wj8z4yb5MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvR1RodXNCalNTRDFfaUUyMV9mbkNQelBqSnZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP3IMA0G
CSqGSIb3DQEBCwUAA4IBAQBYgYMeQ6HW8BUlEF0tnDr2oEcS9tkJ11VL3UIrQCbf
1SkE1LF9cGTRkq+pEn2cvcs46PcMB9TwDKReOl2Cd3vubT5/gucGH6ZegQwnHeAQ
yvqJU22fDHI9+Kdb9DREgtBogfQ56u6RDHLtAlkF04YVSMWQkHffO99xPD/IhRod
ujnrQUQMxnIZv1hrA1qLwV9qh393Ps6xI+MlpTHZEBNNEl1C9qs5diFH2r5X4RGy
o3IsjS+LJXCTdtzkCqta8XtWRrCnf0N00L0AUaF4DDvRPJfdlG3GcgmLqFY0GbUT
SS5/TpZlPBywDqw6w5A3cWtWF4zAh7e4JnTMcx1DbeCK
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:43 2026 by rpki-client